Thats assuming I have control over how the JVM is started. I dont. So mentioning a system property to set is not a fix. When is 2.7.1 coming out?
Meanwhile, back at the ranch, the CVE says upgrade to 2.7.1 There is no 2.7.1, so any library using hsql 2.7.0 is flagged as having a high severity CVE. When will 2.7.1 be ready?